Citát Sami Ketola <[email protected]>:
On 12 Jul 2017, at 15.46, Rick Romero <[email protected]> wrote:
This is awesome, as I was just contemplating how to maintain
persistence with 2FA.
Is it possible to use a passdb based on remote ip? There's a
username_filter, but I want to use a master password for webmail
(which will use 2FA via Radius), and those IPs are known and
non-routable.
passdb {
driver = static
args = password=masterpassword allow_nets=192.168.0.0/24
}
or can even use single ip like allow_nets=192.168.1.234
Sami
Thanks guys, i reworked it like this (i already allowed only proxy IP
on firewall but thanks for suggestion, i added also allow_nets, just
to be sure) and everything is working fine.
azur